This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa
File:                     4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa (raw, json)
Hash identifier:          iQJVRs6WBEd0Gb45crtmBc2wJzXH0++1oDGdcewo5pc=
Subject key identifier:   E1:0C:8A:2A:97:AD:FB:2F:FD:61:C4:C1:CB:F4:EB:62:81:83:43:98
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       019B77C75A04B33A6389939154407B5D243E
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa
Signing time:             Thu 01 Jan 2026 04:18:31 +0000
ROA not before:           Thu 01 Jan 2026 04:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57846
IP address blocks:        37.130.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:5a:04:b3:3a:63:89:93:91:54:40:7b:5d:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Jan  1 04:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e10c8a2a97adfb2ffd61c4c1cbf4eb6281834398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:11:18:99:36:67:5f:bf:89:87:d6:c2:6b:
                    de:19:be:a3:23:01:9c:e9:33:58:dc:27:a1:b7:e3:
                    88:75:69:dc:88:73:56:c8:16:d3:7d:33:6d:25:a5:
                    3f:e7:0e:5d:13:db:11:64:4e:38:8a:aa:fd:16:fb:
                    f4:23:19:90:8d:a2:58:cf:cc:bd:8b:69:e0:5a:fd:
                    c8:c3:d6:89:27:ad:83:f4:b3:51:f1:33:e8:92:3e:
                    ef:58:11:cf:68:57:21:74:14:fc:a6:d2:60:da:02:
                    04:a7:bb:07:ab:45:a4:40:74:fd:1c:14:13:14:01:
                    14:6f:4d:f9:bc:f1:ab:8d:72:ba:c6:30:3b:23:d5:
                    6f:b8:58:8e:14:43:78:0b:95:4e:f7:f2:3a:59:f6:
                    be:70:50:56:c3:a6:65:2d:9e:d8:a5:12:5b:ef:e4:
                    1a:79:a5:ff:53:e3:43:25:09:11:e7:ac:44:a1:64:
                    6e:e6:cd:31:2e:10:26:f3:ea:00:00:6f:29:9a:c2:
                    ea:87:95:f7:6e:2d:be:72:46:d0:6b:82:db:4c:81:
                    3b:c8:f4:3e:8d:3b:13:76:9d:24:85:99:de:ca:0f:
                    81:da:de:68:b7:a8:54:d7:b0:c0:e7:e6:86:d3:51:
                    9f:8f:ae:50:72:f3:b4:c7:47:b4:fd:8d:63:6c:b2:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:8A:2A:97:AD:FB:2F:FD:61:C4:C1:CB:F4:EB:62:81:83:43:98
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.130.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:63:fa:15:98:d9:ac:a6:77:e4:11:c8:9c:7c:45:1b:68:
         ee:fb:c5:7c:0d:fc:87:f3:4c:d7:53:5d:26:37:0f:52:42:ae:
         f0:7e:49:a0:86:a3:86:f4:ae:56:d9:9e:8e:4c:70:f0:65:e6:
         8d:1c:a9:0a:0d:f4:6f:a9:b4:fc:d3:9f:8e:6e:c4:de:f2:4a:
         03:7c:bc:01:30:29:31:d8:e7:4f:ec:f1:65:d3:03:5c:f8:27:
         ab:78:17:52:86:f8:c1:c7:53:e2:fc:99:33:e4:84:18:67:65:
         dd:81:3a:db:c2:9f:4a:3b:5f:2d:b6:15:0e:f3:42:38:bc:f3:
         52:c0:4d:5b:7e:b3:61:62:32:ff:e7:68:7d:85:2e:5f:42:0f:
         74:22:64:bc:36:b1:2b:03:0d:57:fa:2e:c4:b2:6e:ce:f5:59:
         5a:3c:db:0f:f7:cb:2d:dc:6a:42:6d:82:04:5f:60:28:b1:64:
         0c:0f:e6:26:21:8f:58:5e:73:fe:4e:24:54:61:f4:80:d1:7b:
         26:08:79:79:fc:52:94:d4:77:11:a6:51:e2:af:35:d8:93:b4:
         ab:aa:e3:34:a9:36:b7:62:2e:32:94:13:a3:6c:be:1d:75:eb:
         a4:fc:63:8d:8b:d4:d0:e4:c3:21:ef:ba:0d:68:a6:39:c3:64:
         14:6c:00:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x1oEszpjiZORVEB7XSQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri
ZjYzMzUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTBjOGEyYTk3YWRmYjJmZmQ2MWM0YzFjYmY0ZWI2MjgxODM0Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3cRGJk2Z1+/iYfWwmveGb6jIwGc
6TNY3Ceht+OIdWnciHNWyBbTfTNtJaU/5w5dE9sRZE44iqr9Fvv0IxmQjaJYz8y9
i2ngWv3Iw9aJJ62D9LNR8TPokj7vWBHPaFchdBT8ptJg2gIEp7sHq0WkQHT9HBQT
FAEUb035vPGrjXK6xjA7I9VvuFiOFEN4C5VO9/I6Wfa+cFBWw6ZlLZ7YpRJb7+Qa
eaX/U+NDJQkR56xEoWRu5s0xLhAm8+oAAG8pmsLqh5X3bi2+ckbQa4LbTIE7yPQ+
jTsTdp0khZneyg+B2t5ot6hU17DA5+aG01Gfj65QcvO0x0e0/Y1jbLJEWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEMiiqXrfsv/WHEwcv062KBg0OYMB8GA1UdIwQY
MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt
NDZkZDEyMDVkY2ZmLzEvNFF5S0twZXQteV85WWNUQnlfVHJZb0dEUTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm
LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJYKYMA0G
CSqGSIb3DQEBCwUAA4IBAQB1K2P6FZjZrKZ35BHInHxFG2ju+8V8DfyH80zXU10m
Nw9SQq7wfkmghqOG9K5W2Z6OTHDwZeaNHKkKDfRvqbT805+ObsTe8koDfLwBMCkx
2OdP7PFl0wNc+CereBdShvjBx1Pi/Jkz5IQYZ2XdgTrbwp9KO18tthUO80I4vPNS
wE1bfrNhYjL/52h9hS5fQg90ImS8NrErAw1X+i7Esm7O9VlaPNsP98st3GpCbYIE
X2AosWQMD+YmIY9YXnP+TiRUYfSA0XsmCHl5/FKU1HcRplHirzXYk7SrquM0qTa3
Yi4ylBOjbL4ddeuk/GONi9TQ5MMh77oNaKY5w2QUbABF
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:51 2026 by rpki-client